Portforwarding Site2Site VPN

Hi everybody!

I’ve a short question:

I’ve connected to sites via Site2Site VPN.

SiteA: 10.1.2.0/24
Webserver: 10.1.2.1/24

SiteB: 10.1.3.0/24
PublicIP: 8.8.8.8

How can I forward the traffic from the SiteB public IP (8.8.8.:sunglasses: to the Webserver?
I’ve already created a NAT rule, but the problem is, that the packet comes with a public IP and not the SiteBs Mikrotiks internal IP and so the traffic will be routed via the default route on SiteA-Router.

Thank you,
br Martin

Port forwarding

Nat Rule

chain=dstnat
action=device internal port
protocol=tcp
in-interface=internet gateway
dst-port=device external port

you need to specify a port for your server or device and its ip
and point it to that port and gateway on the router

also 8.8.8.8 is google dns, use a different ip

Hi,

thank you for your post.

The solution is:

Create port forwarding rule for the service. And a masquerading rule with dst address of the web server on SiteA, which is placed before the nat rule.

br Martin